Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already signal a non-read-only, non-idempotent, non-destructive write, so the description doesn't need to restate that. It adds genuinely non-obvious behavior: a per-IP-per-month throttling rule and the fact that the credential is returned once and is secret, which changes how an agent must handle the response. It stops short of explaining what happens on a throttled attempt (error shape, wait guidance).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.